LeNet5 [1]} is used as the backbone network for image classification tasks in FL system. The first 2 convolutional layers of LeNet are regarded as private extractor, while the latter 3 fully connected layers are regarded as public classifier. The generative adversarial network architecture is a modified version of DCGAN [2]}, in which the size and stride of convolution kernels are adjusted to match the output dimensions of the extractor and generator.
